Skip to content
From the Odoo Survival Guide

Free Infrastructure Tools

The same tools Hexalian uses on production Odoo servers. Ansible playbooks, Docker templates, PostgreSQL configs, monitoring stacks, and backup scripts — all free, all production-grade.

5Free Tools
0License Fees
100%Source Included
FREE

Infrastructure

Server Hardening Ansible Playbooks

CIS-aligned. Idempotent. Under 5 minutes.

Production-ready Ansible playbook that hardens Ubuntu 22.04/24.04 servers for Odoo deployments — UFW firewall, fail2ban, SSH key-only auth, kernel sysctl, and unattended security updates.

  • UFW deny-all + SSH/HTTP/HTTPS rules
  • fail2ban with configurable ban thresholds
  • Disable root login, enforce key-based auth
  • Kernel TCP/SYN hardening via sysctl
  • Unattended security upgrades (with email alerts)
FREE

Containers

Docker Production Compose Templates

Zero exposed ports. Health checks. Resource limits.

Hardened Docker Compose stack for Odoo 18 in production: PostgreSQL 16, Nginx reverse proxy with SSL, rate limiting on login, and production override file with CPU/RAM limits and restart policies.

  • Odoo 18 + PostgreSQL 16 + Nginx stack
  • No DB ports exposed — internal network only
  • Health checks for all three services
  • SSL, HSTS, security headers in nginx.conf
  • Resource limits and restart: always in prod override
FREE

Database

PostgreSQL Optimization Configurations

Tuned for Odoo workloads. Aggressive autovacuum.

postgresql.conf tuned for Odoo ERP workloads with proper memory sizing, WAL configuration, autovacuum settings for high-churn tables, and SQL scripts to identify slow queries and missing indexes.

  • shared_buffers, work_mem, effective_cache_size tuned
  • Aggressive autovacuum for sale_order/stock_move
  • Slow query logging (>500ms threshold)
  • analyze-queries.sql: find bottlenecks live
  • create-indexes.sql: 20+ Odoo-specific indexes
FREE

Monitoring

Prometheus + Grafana Monitoring Stack

CPU, RAM, disk, and PostgreSQL alerts out of the box.

Docker Compose monitoring stack with Prometheus, Grafana, node_exporter, and postgres_exporter. Pre-built alert rules for critical thresholds and auto-provisioned Grafana datasource.

  • node_exporter: CPU, RAM, disk, network metrics
  • postgres_exporter: connections, deadlocks, replication lag
  • Alert rules: CPU >80%, RAM >85%, disk <15%
  • Auto-provisioned Prometheus datasource in Grafana
  • 30-day metric retention configured
FREE

Backup

Automated Backup Scripts

pg_dump + filestore + rotation + rclone offsite.

Battle-tested Bash scripts for complete Odoo backups: PostgreSQL dump, filestore archive, SHA-256 checksums, configurable 30-day rotation, and optional rclone upload to S3/Backblaze/GCS.

  • pg_dump + gzip + filestore tar.gz in one script
  • SHA-256 checksum verification on restore
  • Automatic rotation (configurable retention days)
  • Optional rclone offsite upload (S3, Backblaze B2, SFTP)
  • Interactive restore script with safety confirmations

Need Custom Engineering?

These tools cover the basics. For complex Odoo development, ERP architecture, or full infrastructure management — that's what Hexalian does.